Johann Rehberger

**Name of the Vulnerable Software and Affected Versions** M365 Copilot (affected versions not specified) **Description** An improper neutralization of special elements used in a command ('command injection') exists in M365 Copilot. This allows an unauthorized attacker to disclose information over a network. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** GitHub Copilot (affected versions not specified) Visual Studio 2022 versions prior to 17.14.12 **Description** Improper neutralization of special elements used in a command leads to a command injection issue in GitHub Copilot and Visual Studio, allowing an unauthorized attacker to execute code locally. This can be achieved through prompt injection, where an attacker hides malicious instructions within a repository comment, README, or PR description. The AI assistant may be tricked into modifying the `.vscode/settings.json` file to enable an auto-approve mode, which allows the agent to execute arbitrary bash commands in the terminal without human confirmation. **Recommendations** Update Visual Studio 2022 to version 17.14.12. At the moment, there is no information about a newer version that contains a fix for this vulnerability for GitHub Copilot.